MAL-2025-148018 Malicious code in soap-csrf-sync-nextjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a0c2f22baa42188e2631d684d1e40fb625c164578e44e42c3f580ecab9fe225 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141990 Malicious code in eleventy-aurora-csrf-semantic-release (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11bd61603a8d9897e58648607455671c4b3464648f4a3f11093edac31e0a73c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147176 Malicious code in rehype-meteor-pegasus-transform (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73fa9c9bc7d00cb76bf4363eeb00bf670efaa50798ea6e6eb8f5a516d613d61f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147598 Malicious code in sagitta-helmet-vuepress-spectron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ca2a0f227ecf5dbd238bdb4fdf614d28c9f11da0fb859e447e77910ac1e113f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142843 Malicious code in gatsby-fork-soap-promise (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b73e7a65de6af65020a1c45f76329317657d4f7569beaffbfa56f0471cd8adbc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139474 Malicious code in apex-castor-gridsome-avior (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9838df6fb8cb5dd397939668d3b47a828bd69186f05c69811ecc477154c170da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141688 Malicious code in dorado-ignite-kronos-prettier-plugin-markdown (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66abf121dfd2cc9376e533592688a982b3b97fa45c1a65d3d4d3d85a8e1cac52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146175 Malicious code in phoebe-rehype-style-loader-nightwatch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9cd9c68db65094df4f1ff7de4e1846f61961d90dbd20b968662d96ff11894c29 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138861 Malicious code in mature-beige-turtle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46b58ac1ce1747ab82066cab5e94a6bbb54369ba4c18c7646b95d182045d2e73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in living-amethyst-otter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6486a5d43474649c11227f0aeb85bf1a69e39679f755b9069d017290d3e1f4e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in heroisme (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b6e16d141e590aaba3c9f7f6e4903a270e1f51fa0b246cffd19585209ea0962 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lina-gado-gado86-sumpek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf1daf77eba80c4757091526ab6cab03cbe53f996d6a847876ff913caaec9a1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in surya-serimuka52-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26d41428857a7da3874149232297c651ba7e598fa4346f3cf57b0cd756cfba3e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manual_shrew_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 143319c283d109d52d2a33f42f17b2876027e9cd7b2cef5ce20654e7e78ba425 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in latin_slug_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9588bd5298ae71d3e6ffa2fd6e153a8c2fd654a4b0a6a9604e58439ad26149b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in favourite_mule_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bde661d3fd85ced784e0baa0164bceb1e4787f8c5a5ea0898ef0d3415009441 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lutfi-kue83-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50d2479793bde78dcbf7e904c847e06b888ce8a3669b8e35c667aa5b63b92156 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kurniawan-takokak62-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4ffdd69488e396f2842fe0a39d3d5258363985673185e8566123ae425e3ce94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in candra-otak-otak61-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54931d8eb33a133189bbbd8dc49fd7fd8f67dbae591ac564ec5cdebd71fa690f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zain-takokak43-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5483b7220cf92e63632540eb66c9d3b0ced9642af0befb1bfb72adf3fe8105e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...